DER risk is assessed across physical and electrical threats and inadvertent and deliberate cyber threats, power system and cyber vulnerabilities and attacks, risk handling and mitigation categories, and impacts on safety, outages, power quality, finances, regulation and law, the environment and goodwill; each stakeholder's resilience responsibilities are set out, with resilience delivered both by a general IT cyber security approach and by engineering design and operational strategies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.